Overview

overview

10

Static

static

3

9fdf1f2ad7...18.dll

windows7-x64

10

9fdf1f2ad7...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9fdf1f2ad7cd5225a57c91e333de2f44_JaffaCakes118

  • Size

    5.0MB

  • Sample

    240612-h44pzstgnj

  • MD5

    9fdf1f2ad7cd5225a57c91e333de2f44

  • SHA1

    4651877bfa78921e926e19f655676c6025f4a747

  • SHA256

    f6167721226b978b2225c31a8d9f94833de9555cf83186fff8970a7c41043fd4

  • SHA512

    35c56b13c14ed3159e8bcd72cccb5bfd4c6240448c24338c4c6ac8d2562f551e4d0a15d3a449659463cfb507c28d75422c5d6cc22c263f1d8f1f8c9e960d8ba9

  • SSDEEP

    98304:TDqPoBhz1aRxcSUDk36SAEdhvxWi593R8yAVp2H:TDqPe1Cxcxk3ZAEUizR8yc4H

Score
10/10
wannacrydiscoveryransomwareworm

Malware Config

Targets

    • Target

      9fdf1f2ad7cd5225a57c91e333de2f44_JaffaCakes118

    • Size

      5.0MB

    • MD5

      9fdf1f2ad7cd5225a57c91e333de2f44

    • SHA1

      4651877bfa78921e926e19f655676c6025f4a747

    • SHA256

      f6167721226b978b2225c31a8d9f94833de9555cf83186fff8970a7c41043fd4

    • SHA512

      35c56b13c14ed3159e8bcd72cccb5bfd4c6240448c24338c4c6ac8d2562f551e4d0a15d3a449659463cfb507c28d75422c5d6cc22c263f1d8f1f8c9e960d8ba9

    • SSDEEP

      98304:TDqPoBhz1aRxcSUDk36SAEdhvxWi593R8yAVp2H:TDqPe1Cxcxk3ZAEUizR8yc4H

    Score
    10/10
    wannacrydiscoveryransomwareworm

    • Wannacry

      WannaCry is a ransomware cryptoworm.

      ransomwarewormwannacry

    • Contacts a large (3313) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Executes dropped EXE

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks